test(BA-5797): add repository unit tests for resolve_effective_permissions

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: fregataa

src/ai/backend/manager/data/permission/role.py

@@ -1,6 +1,7 @@
 from __future__ import annotations
 
 import uuid
+from collections.abc import Mapping
 from dataclasses import dataclass, field
 from datetime import datetime
 
@@ -113,7 +114,7 @@ class EffectivePermissionsInput:
 class EffectivePermissionsResult:
     """Mapping from entity ID to the set of operations the user is authorized to perform."""
 
-    permissions: dict[str, set[OperationType]]
+    permissions: Mapping[str, set[OperationType]]
 
 
 @dataclass(frozen=True)

src/ai/backend/manager/repositories/permission_controller/db_source/db_source.py

@@ -1,5 +1,6 @@
 import logging
 import uuid
+from collections import defaultdict
 from collections.abc import Collection, Iterable, Sequence
 from dataclasses import dataclass, field
 from typing import Any, cast
@@ -1164,7 +1165,7 @@ async def resolve_effective_permissions(
 
         combined_query = sa.union_all(scope_chain_query, self_scope_query)
 
-        permissions: dict[str, set[OperationType]] = {eid: set() for eid in data.target_entity_ids}
+        permissions: defaultdict[str, set[OperationType]] = defaultdict(set)
         async with self._db.begin_readonly_session_read_committed() as db_session:
             result = await db_session.execute(combined_query)
             for row in result:

src/ai/backend/manager/services/permission_contoller/actions/resolve_effective_permissions.py

@@ -1,17 +1,17 @@
 from __future__ import annotations
 
+from collections.abc import Mapping
 from dataclasses import dataclass, field
 from typing import override
 from uuid import UUID
 
 from ai.backend.common.data.permission.types import EntityType, OperationType, RBACElementType
-from ai.backend.manager.actions.action import BaseActionResult
+from ai.backend.manager.actions.action import BaseAction, BaseActionResult
 from ai.backend.manager.actions.types import ActionOperationType
-from ai.backend.manager.services.permission_contoller.actions.base import RoleAction
 
 
 @dataclass
-class ResolveEffectivePermissionsAction(RoleAction):
+class ResolveEffectivePermissionsAction(BaseAction):
     """Action to resolve effective permissions per entity for a given user.
 
     Given a user ID, an element type, and a list of entity IDs, returns the
@@ -28,6 +28,11 @@ class ResolveEffectivePermissionsAction(RoleAction):
     def entity_id(self) -> str | None:
         return str(self.user_id)
 
+    @override
+    @classmethod
+    def entity_type(cls) -> EntityType:
+        return EntityType.PERMISSION
+
     @override
     @classmethod
     def operation_type(cls) -> ActionOperationType:
@@ -38,7 +43,7 @@ def operation_type(cls) -> ActionOperationType:
 class ResolveEffectivePermissionsActionResult(BaseActionResult):
     """Result containing the effective permissions per entity."""
 
-    permissions: dict[str, set[OperationType]] = field(default_factory=dict)
+    permissions: Mapping[str, set[OperationType]] = field(default_factory=dict)
 
     @override
     def entity_id(self) -> str | None: